This week, a New Zealand cryptocurrency trader named Shayne (known as 'Crypto is Key') experienced a nightmare: his Bittrex account was hacked, resulting in the loss of 7 BTC (approximately $18,000), and the entire theft was recorded. Shayne believes malicious bots were used to steal his digital assets.
Account Breach: From 11 BTC to 4 BTC
Shayne shared his Bittrex account with a friend and had enabled two-factor authentication (2FA) with a long password. However, when he woke up and logged in, he found his holdings being sold and 7 BTC withdrawn to an unknown address. 'Every trader's worst nightmare is losing wealth to thieves. Last night I was in that nightmare, and worse, I had to fight while they tried to take my last 4 Bitcoin,' he described.
In the recorded video, Shayne and his friend were logged in while the hacker siphoned funds. The attacker appeared to be a fast-acting bot selling altcoins at market price and withdrawing BTC after each sale. Shayne frantically canceled orders and tried to remove remaining assets, but the hacker kept resuming sales. He eventually managed to salvage 4 BTC.
API Key Leak: Tutorial Videos as a Risk
Bittrex later confirmed the account was compromised through API calls. Shayne speculated that his API keys might have been leaked when he posted trading tutorial videos on YouTube. 'I used API keys in video tutorials before and may have deleted the wrong ones without double-checking before uploading,' he said. The experience made him vow never to store large amounts on exchanges: 'This lesson has been very hard, but I will not give up. I will come back stronger.'
The incident underscores the danger of revealing digital holdings on social media, forums, or YouTube, which directly creates targets for hackers. Self-custody and private key security are paramount; even a moment's carelessness can lead to severe losses.
Video link: https://www.youtube.com/watch?v=eZRPDrlUggY
What do you think about Shayne's loss on Bittrex and the accidental API key exposure? Share your thoughts in the comments.